Secure Boot keys need updating. TPM-WMI Event Log Error 1801

[mfessler 0]

I keep getting the following error in event log. I went to the BIOS and reset the keys to the default keys and checked that secure boot was active. But still getting the error.

Code:

Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:Gigabyte Technology Co., Ltd.;FirmwareManufacturer:American Megatrends International, LLC.;FirmwareVersion:F32;OEMModelNumber:Z690 GAMING X;OEMModelBaseBoard:Z690 GAMING X;OEMModelSystemFamily:Z690 MB;OEMManufacturerName:Gigabyte Technology Co., Ltd.;OEMModelSKU:Default string;OSArchitecture:amd64;
BucketId: f198014fa69b82c6c5b12383fc6fa96d41835d5fb4df51d3e8cd673702d92107
BucketConfidenceLevel:
UpdateType: 0
HResult: The operation completed successfully.

I previously updated the keys as per THIS THREAD and doing the check again it still says 'true'.

Any ideas what I need to do?